popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
8221 2023-09-26 19:46 amday.exe  

2421112335f8c112d36630dc0e0be4e2


Amadey Admin Tool (Sysinternals etc ...) UPX Malicious Library Http API HTTP Code injection Internet API AntiDebug AntiVM PE File PE32 .NET EXE GIF Format Lnk Format DLL OS Processor Check Malware download Amadey VirusTotal Malware Buffer PE AutoRuns PDB Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut Creates executable files unpack itself AppData folder Windows ComputerName DNS Cryptographic key 		1 1 2 1 13.4 M 53 ZeroCERT

8222 2023-09-26 19:44 amday.exe  

010a01d7d42e46870c9b44781256dcc8


Amadey Downloader Admin Tool (Sysinternals etc ...) UPX MPRESS Create Service Socket P2P DGA Steal credential Http API Escalate priviledges PWS Hijack Network Sniff Audio HTTP DNS ScreenShot Code injection Internet API persistence FTP KeyLogger AntiDebug Malware download Amadey VirusTotal Malware AutoRuns PDB suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut Creates executable files unpack itself Windows utilities Checks Bios Detects VirtualBox Detects VMWare suspicious process malicious URLs WriteConsoleW VMware anti-virtualization Windows ComputerName Firmware DNS crashed 		2 3 5 1 18.4 M 56 ZeroCERT

8223 2023-09-26 18:56 pass1234.7z  

0659cc0732eb954c5d74671266a0cbff


PrivateLoader Stealc Escalate priviledges PWS KeyLogger AntiDebug AntiVM RedLine Malware download Dridex Malware c&c Microsoft Telegram suspicious privilege Malicious Traffic Check memory Checks debugger Creates executable files ICMP traffic unpack itself IP Check PrivateLoader Tofsee Stealc Stealer Windows RisePro Trojan DNS Downloader 		58 101 46 25 6.0 M ZeroCERT

8224 2023-09-26 18:46 executeInstall - Copy.js  

fcb124a08ae0351cab33214c2eda395f

VirusTotal Malware DNS crashed 		1 2.6 9 ZeroCERT

8225 2023-09-26 18:32 temp.js  

98647908b75a0485ad44a786e5967aa4

VirusTotal Malware DNS crashed 		1 1 2.6 8 ZeroCERT

8226 2023-09-26 18:19 neverban_zBbnJe.vbs  

08cbb6ece8ee6238c20a24691b0c6855

VirusTotal Malware wscript.exe payload download DNS 		1 1 2.4 10 ZeroCERT

8227 2023-09-26 18:18 neverban_vrkvQj.vbs  

e2bcfd5fd4c45b3f95e7e9144f7495c6


[C] All Process AntiDebug AntiVM Malware download VirusTotal Malware Code Injection WMI wscript.exe payload download Windows utilities suspicious process WriteConsoleW DarkGate Windows ComputerName DNS Downloader 		1 1 1 1 7.0 M 4 ZeroCERT

8228 2023-09-26 18:18 neverban_pvLGjZ.vbs  

457f92980b658c7332928d72faff99a9


[C] All Process AntiDebug AntiVM Malware download Malware Code Injection WMI wscript.exe payload download Windows utilities suspicious process WriteConsoleW DarkGate Windows ComputerName DNS Downloader 		2 1 1 1 6.6 ZeroCERT

8229 2023-09-26 18:11 neverban_LnyakY.pdf  

09e70e63dd0480ee79a5e0ee664abce8


PDF ZIP Format Windows utilities Windows 		5 1.4 ZeroCERT

8230 2023-09-26 18:09 neverban_LRKOPK.vbs  

457f92980b658c7332928d72faff99a9


[C] All Process AntiDebug AntiVM Malware download Malware Code Injection WMI wscript.exe payload download Windows utilities suspicious process WriteConsoleW DarkGate Windows ComputerName DNS Downloader 		1 1 1 6.6 ZeroCERT

8231 2023-09-26 18:08 neverban_FFNTdW.vbs  

1769260da8b9bd86d94598a926e93bb5


[C] All Process AntiDebug AntiVM Malware download VirusTotal Malware Code Injection WMI wscript.exe payload download Windows utilities suspicious process WriteConsoleW DarkGate Windows ComputerName DNS Downloader 		1 1 1 7.0 4 ZeroCERT

8232 2023-09-26 18:05 neverban_COifEs.vbs  

e2bcfd5fd4c45b3f95e7e9144f7495c6


[C] All Process AntiDebug AntiVM Malware download VirusTotal Malware Code Injection WMI wscript.exe payload download Windows utilities suspicious process WriteConsoleW DarkGate Windows ComputerName DNS Downloader 		1 1 1 1 7.0 M 4 ZeroCERT

8233 2023-09-26 18:05 neverban_dWMkPE.vbs  

1bd0900f5c260ec597662cbcdb396d4a

VirusTotal Malware wscript.exe payload download DNS 		2 1 1 2.2 5 ZeroCERT

8234 2023-09-26 18:05 login_qYxkKH.vbs  

17ad01cded9cce9be82081ad7f0f599a

VirusTotal Malware wscript.exe payload download DNS 		2 1 1 2.2 5 ZeroCERT

8235 2023-09-26 17:52 1.exe  

0ad6deed1fc88623c70e2c9ee906dbb1


Malicious Library UPX Malicious Packer PE File PE32 OS Processor Check GIF Format Lnk Format PNG Format VirusTotal Malware Creates shortcut Creates executable files unpack itself sandbox evasion installed browsers check Browser ComputerName 		3.2 M 41 ZeroCERT

keyword